
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3138332e39312e3134342e302f32302d3230203d3e203130323132.roa
File: 3138332e39312e3134342e302f32302d3230203d3e203130323132.roa (raw, json)
Hash identifier: NB/J1Zk2dZjwVo0k+XibBKzCrRWKohNWM4aRX6t7nvg=
Subject key identifier: 75:77:DD:3F:45:FB:85:AB:9F:AB:F5:79:98:1D:81:1F:C5:AB:43:07
Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial: 2216F17167A7308ED10E80282FFE2D40F4A6C6CF
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3138332e39312e3134342e302f32302d3230203d3e203130323132.roa
Signing time: Tue 28 Apr 2026 07:28:27 +0000
ROA not before: Tue 28 Apr 2026 07:23:27 +0000
ROA not after: Tue 27 Apr 2027 07:28:27 +0000
asID: 10212
IP address blocks: 183.91.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:16:f1:71:67:a7:30:8e:d1:0e:80:28:2f:fe:2d:40:f4:a6:c6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Validity
Not Before: Apr 28 07:23:27 2026 GMT
Not After : Apr 27 07:28:27 2027 GMT
Subject: CN=7577DD3F45FB85AB9FABF579981D811FC5AB4307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cb:34:9f:86:14:98:c3:ac:15:d7:5c:30:9b:
2c:c3:79:02:3f:02:d9:ab:a7:47:3e:92:4a:83:60:
4c:15:7b:7a:27:1e:46:18:9e:55:70:bd:be:36:c0:
14:b0:90:21:47:9f:36:fb:7a:11:1b:1a:ba:47:06:
4f:b8:d1:c1:2e:e5:38:87:1f:0a:16:de:75:61:89:
49:80:ad:75:db:e1:3c:cd:9a:5c:c4:7c:54:74:21:
3d:d5:32:f1:2b:28:8d:0d:dc:36:54:5d:0d:ba:13:
d4:5d:84:c7:f6:b2:d1:9b:a1:d6:d4:07:3b:68:b8:
31:48:e7:ea:79:d1:f9:ac:4a:00:69:7c:6a:64:62:
61:87:80:7c:59:bc:f7:1b:4c:1c:b5:cc:63:4a:c4:
cf:f3:5d:eb:84:59:30:cf:52:db:18:7f:60:27:62:
1a:71:17:63:a6:18:e0:1f:44:46:e4:8e:41:fb:12:
05:f1:c1:cf:5e:4a:f3:40:7d:13:d6:1f:87:ce:eb:
1f:94:c9:33:e7:4a:3a:51:70:fc:c4:51:33:eb:78:
cc:c4:34:22:f1:02:3e:d7:d6:b1:bb:ac:b2:a6:e8:
1d:41:63:b3:f0:75:e5:22:f1:1c:1a:5b:77:e3:03:
5d:19:77:0d:d9:1b:46:07:b9:3e:ab:66:5a:fc:18:
b9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:77:DD:3F:45:FB:85:AB:9F:AB:F5:79:98:1D:81:1F:C5:AB:43:07
X509v3 Authority Key Identifier:
keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3138332e39312e3134342e302f32302d3230203d3e203130323132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
183.91.144.0/20
Signature Algorithm: sha256WithRSAEncryption
89:31:20:68:ce:02:40:9b:fb:b6:08:aa:76:6d:4b:e6:ce:9f:
b3:fa:b4:eb:45:04:49:83:3d:9a:ed:7e:aa:7d:9f:ab:d3:62:
f8:45:f5:61:77:7e:df:24:3c:a1:cc:69:a6:98:1e:af:7b:4b:
9f:b8:5f:55:c2:08:9d:61:dc:3f:46:54:99:9a:7c:1d:a7:c8:
19:5b:f3:85:d3:4f:99:88:b9:17:3c:cd:a0:75:c8:b0:7d:5d:
d0:8d:6e:59:00:52:81:e1:81:72:fb:f2:30:dc:39:a9:3e:1c:
fa:d3:1c:c7:c5:6f:e1:a5:41:bc:b3:0e:6f:c5:84:a2:6a:35:
8a:2b:a3:c4:ae:04:70:92:45:20:0f:7f:9a:8d:d7:e5:df:78:
b3:b3:64:a8:b3:b3:53:46:9b:64:5b:6a:7f:85:33:8a:48:07:
ff:17:d1:bb:4a:27:f7:49:89:d8:6a:b7:ff:6f:e8:86:ec:da:
17:b0:20:1c:30:6d:02:bc:0e:69:1f:ab:d6:6e:a9:e8:37:5f:
33:78:9a:64:c2:0c:42:c6:11:3d:c6:35:b4:8a:7c:96:33:25:
ba:c0:b1:17:0c:44:dd:63:a4:ac:34:4c:2f:1a:e4:b0:34:a4:
be:6f:1e:30:1b:bf:7e:40:2b:d4:8c:b2:fe:12:f1:81:8c:29:
5e:e5:b5:64
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 19:36:11 2026 by rpki-client